hasura / hasura/graphql-engine

Provide a different postgres user for migrations

Open
#8,339 1 comment 0 reactions 0 assignees View on GitHub
c/cli c/migrations k/enhancement t/product-platform
Dominant language
TypeScript
Stars
32.1k
Forks
3k
PR merge metrics
PR metrics pending

Description

### Is your proposal related to a problem?

I want to provide to Hasura a dedicated pg user that doesn't have full powers, for instance if I have some financial transactions stored in the database, nobody in the infrastructure has to be allowed to delete them, even if they manage to hack the hasura instance they would not be allowed to have full admin control on the database.
The issue is that just when it comes to migrations, hasura has to be able to edit everything in the database.
### Describe the solution you'd like

When i apply a migration from the cli there is an option to provide the credentials of a pg user that is going to perform the migration.
### Describe alternatives you've considered

I could use a different migration service but i'm fine with hasura

### If the feature is approved, would you be willing to submit a PR?

Well, maybe

Contributor guide

Open the contributing guide

Research direction

Start by tracing the Hasura CLI migration command and how it currently receives PostgreSQL credentials. Check the migration documentation and related tests or command entry points available in the repository; done means the CLI can accept dedicated migration-user credentials separately from the regular database connection.

Written by the indexing model from the issue text.

Assessment

Tech stack
postgresql
Domain
cli, databases
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.